{"uuid": "c69b6410-5610-414e-8d19-992ac683c8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-1563", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/realwin_on_fc_binfile_a.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Luigi Auriemma\", \"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in DATAC Control International RealWin\\n          SCADA Server 2.1 and below. By supplying a specially crafted On_FC_BINFILE_FCS_*FILE\\n          packet via port 910, RealWin will try to create a file (which would be saved to\\n          C:\\\\Program Files\\\\DATAC\\\\Real Win\\\\RW-version\\\\filename) by first copying the user-\\n          supplied filename with an inline memcpy routine without proper bounds checking, which\\n          results a stack-based buffer overflow, allowing arbitrary remote code execution.\\n\\n          Tested version: 2.0 (Build 6.1.8.10)\", \"disclosure_date\": \"2011-03-21\", \"fullname\": \"exploit/windows/scada/realwin_on_fc_binfile_a\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/scada/realwin_on_fc_binfile_a.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/scada/realwin_on_fc_binfile_a\", \"references\": [\"CVE-2011-1563\", \"OSVDB-72826\", \"BID-46937\", \"URL-http://aluigi.altervista.org/adv/realwin_5-adv.txt\", \"URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-11-110-01\"], \"rport\": 910, \"session_types\": false, \"targets\": [\"Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:29.770720Z"}